Vulnerability in Slackware Linux

CVE-1999-0298

ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.

EPSS: 0.020 (79.1th percentile) — read the EPSS interpretation.

Affected products

Slackware Slackware_linux — versions 2.1, 2.2, 2.3
Sun Sunos — versions 4.1.3, 4.1.4
N/a — versions n/a

References

cve@mitre.org (x_refsource_NAI, vendor-advisory)